Known vulnerabilities in SUSE Linux Enterprise Server 15 SP5 LTSS - page 24

Vendor: SUSE
Software: SUSE Linux Enterprise Server 15 SP5
Version: LTSS
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp5:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 3519
Public exploits: 83
Known exploited (KEV): 24
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Server 15 SP5 version LTSS SUSE Linux Enterprise Server 15 SP5 LTSS is affected by 3519 vulnerabilities: 18 critical, 380 high, 743 medium, 2378 low Critical High Medium Low

Vulnerabilities (3519)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU133359 - Use After Free
CVE-2026-41035		 CWE-416 Medium
No
No
 - 04.06.2026 SB2026060475
SB2026060476
SB2026060477
and 19 more
#VU133144 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-29518		 CWE-367 Low
No
No
 - 01.06.2026 SB2026060174
SB2026060175
SB2026060184
and 15 more
#VU133145 - Improper Access Control
CVE-2026-43617		 CWE-284 Medium
No
No
 - 01.06.2026 SB2026060174
SB2026060175
SB2026060184
and 12 more
#VU133146 - Integer overflow
CVE-2026-43618		 CWE-190 Low
No
No
 - 01.06.2026 SB2026060174
SB2026060175
SB2026060184
and 20 more
#VU133148 - Out-of-bounds read
CVE-2026-43620		 CWE-125 Medium
No
No
 - 01.06.2026 SB2026060174
SB2026060175
SB2026060184
and 16 more
#VU133149 - Off-by-one Error
CVE-2026-45232		 CWE-193 Medium
No
No
 - 01.06.2026 SB2026060174
SB2026060175
SB2026060184
and 18 more
#VU132319 - Information Exposure Through Timing Discrepancy
CVE-2026-47783		 CWE-208 Low
No
No
 - 26.05.2026 SB2026052674
SB20260528298
SB20260529197
and 4 more
#VU132320 - Information Exposure Through Timing Discrepancy
CVE-2026-47784		 CWE-208 Low
No
No
 - 26.05.2026 SB2026052674
SB20260528278
SB20260528298
and 3 more
#VU130215 - Resource exhaustion
CVE-2026-42587		 CWE-400 Medium
No
No
 - 05.05.2026 SB20260505124
SB2026052040
SB20260528254
and 10 more
#VU130214 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-42581		 CWE-444 Medium
No
No
 - 05.05.2026 SB20260505124
SB2026052040
SB20260528254
and 10 more
#VU130213 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-42586		 CWE-93 High
No
No
 - 05.05.2026 SB20260505124
SB2026060936
SB2026060963
#VU130210 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-42585		 CWE-444 Medium
No
No
 - 05.05.2026 SB20260505124
SB2026052040
SB20260528254
and 11 more
#VU130207 - Uncontrolled Memory Allocation
CVE-2026-42582		 CWE-789 Medium
No
No
 - 05.05.2026 SB20260505124
SB2026060963
#VU130206 - Allocation of Resources Without Limits or Throttling
CVE-2026-42583		 CWE-770 Medium
No
No
 - 05.05.2026 SB20260505124
SB2026052039
SB20260528254
and 7 more
#VU130205 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-42584		 CWE-444 Medium
No
No
 - 05.05.2026 SB20260505124
SB2026052040
SB20260528254
and 11 more
#VU130204 - Resource exhaustion
CVE-2026-44248		 CWE-400 Medium
No
No
 - 05.05.2026 SB20260505124
SB2026060963
#VU128730 - Improper Authorization
CVE-2026-33186		 CWE-285 High
No
No
 - 01.05.2026 SB2026050106
SB2026050107
SB2026050108
and 68 more
#VU123174 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-27606		 CWE-22 High
Public exploit available
No
 - 24.02.2026 SB2026022445
SB2026040631
SB2026040632
and 2 more
#VU120348 - Out-of-bounds read
CVE-2025-10158		 CWE-125 Medium
No
No
 - 26.12.2025 SB2025122689
SB2025122697
SB2025122698
and 25 more
#VU102729 - Heap-based Buffer Overflow
CVE-2024-12084		 CWE-122 Critical
Public exploit available
No
 - 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 25 more


Showing elements 461 - 480 out of 3519